PT-2022-24535 · Unknown · Openharmony

Published 2022-09-09 · Updated 2022-09-14 · CVE-2022-38700

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenHarmony versions prior to 3.1.1

Description The issue allows LAN attackers to bypass permission control, gaining control of the camera service.

Recommendations For OpenHarmony versions prior to 3.1.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

CWE-305

Related Identifiers

CVE-2022-38700

Affected Products

Openharmony

References · 4

• https://osv.dev/vulnerability/CVE-2022-38700 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-38700 · Security Note
• https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-09.md · Note
• https://t.me/cibsecurity/49512 · Telegram Post